IT Tips & Guides

Owners can now set email, security and sensitivity options at creation. Why that closes a real governance gap, and what to configure before it reaches you.

Native point-in-time recovery for Entra objects, the five day retention limit, and why not even a Global Administrator can delete the backups.

Discovering tenants nobody knew existed, governing them consistently, and monitoring drift against a baseline. What the four capability areas actually do.

What each model actually buys, five questions that decide it, and an honest case for staying on break-fix.

Work out whether it is your internet or your WiFi first, then the fixes in order of effort. The band explanation most guides leave out.

Seven causes, and the two minute Task Manager reading that tells you which one you actually have before you spend anything.

Seven things to configure, in the order that buys the most safety per hour, with the licence each one needs and the mistake each one usually hides.

Support ended in October 2025. What Exchange SE actually changes, which of the two upgrade paths applies to you, and the coexistence deadline nobody has noticed.

What DMARC is, what a record actually contains, how a receiving server decides what to do with a forged message, and the four things DMARC cannot do.

Lessons from running automated lifecycle governance at enterprise scale: access that expires by default, named owners, legal hold decided in advance, and how to scale it all down to twelve mailboxes.

The account outlives the person because nothing complains about it. What an orphaned account is, why the licence and the data are separate decisions, and the order to work in.

Old contractor accounts, forgotten invitations, and the previous IT provider who still has administrative access and does not appear in your guest list at all.

All three compared, the licensing traps, and what actually goes wrong with shared mailboxes over five years rather than five weeks.

What the filtering included with every plan covers, the four things it structurally cannot catch, and why paying for Business Premium is not the same as using it.

A record reading v=DMARC1; p=none asks the world to take no action and to tell nobody. Why that state is worse than an empty one, and the order that fixes it.

Three different things get called spoofing and they need three different answers. Which one you have, how to check, and what each is worth doing about.

No malware, no exploit, just a convincing sentence and a busy morning. The four shapes it takes, and the one written rule that defeats most of them.

You've been told you need them, but what do they actually do? A plain-language explanation for business owners.

Seven areas, what each one reliably turns up, and how a real review differs from an automated scan or a Secure Score screenshot.

Five checks that take half an hour and predict the state of everything else. What I usually find, and what the pattern really tells me.

The gap is structural rather than anybody failing. What overnight cover usually means, which problems genuinely cannot wait, and what to ask before you need to.

What the number actually measures, why it moves when you change nothing, the actions worth doing first, and the risks it cannot see at all.

The order to work through your tenant on day one, why blocking sign-in on its own does very little, and the one step that has to happen before all the others.

Ordered so the parts that recover money come first, because a licence removed before the renewal changes next year and one removed after it does not.

Usually after an acquisition, and usually not your choice. What transfers, what quietly does not, and what has to be exported before anybody cancels the subscription.